Automatic detection and demonstrator generation for information flow leaks in object-oriented programs

作者：Quoc Huy Do^*; Bubel Richard; Haehnle Reiner

来源：Computers & Security, 2017, 67: 335-349.

DOI：10.1016/j.cose.2016.12.002

• Test generation
• Symbolic execution
• Information flow
• Declassification
• Information erasure
• Bug finding

We present a method to generate automatically exploits for information flow leaks in object oriented programs. The goal, similar to white-box test generation, is to automatically produce executable, reusable test cases that challenge a given information flow policy with a very high degree of guaranteed coverage. Our approach combines self-composition and symbolic execution to create an insecurity formula for a given program and information flow policy. Satisfiability of this formula signifies the presence of information leaks and permits to use model generation for creating exploits. We support different kinds of information flow policies like noninterference, delimited information release, and information erasure. A prototypic tool implementation for Java programs of our approach is available. It generates exploits in the form of self-contained, executable JUnit tests. We evaluate our method and tool based on a set of micro-benchmarks and a case-study on e-voting.

• 出版日期2017-6